?–? DHCP NAP ES Uses industry-standard DHCP messages to communicate
with the DHCP NAP ECs. Access is controlled using DHCP options.
You will notice that no EAPHost NAP ES is available to match the EAPHost NAP
EC. Enforcement in this special case is actually handled by the 802.1X-enabled switches
and access points by using IP packet filters or VLANs to isolate or grant access to the
authenticating host.
COMMUNICATIONS FLOW
If all the preceding text didn??™t confuse the heck out of you, then congratulations!
My head was spinning the first time I tried to grasp the whole NAP concept. It??™s really
simple once you get to know it, but with so many acronyms, it??™s easy to get lost.
Figure 8-3 shows how the components communicate with one another for the purpose
of evaluating health.
264 Microsoft Windows Server 2008 Administration
The SHA provides the SoH to the NAP agent. The NAP agent then passes this along
to the NAP EC, which then passes it on to its corresponding NAP ES, which then hands
it off to the NAP administrator, which then hands it off to the appropriate SHV. The
resulting SoHR is passed back through the chain to the SHA on the client either to approve
its connection or provide instructions for how to remediate itself. The EC and ES
components control network access based on the resulting response.
Hands-On Exercise: NAP Using DHCP Enforcement
NAP is a complicated topic that requires expertise in many disciplines.
Pages:
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314